CVE-2017-1000136
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/11/2017
Last modified:
20/04/2025
Description
Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable to old sessions not being invalidated after a password change.
Impact
Base Score 3.x
6.50
Severity 3.x
MEDIUM
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:mahara:mahara:1.8:rc1:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.8:rc2:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.8.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.8.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.8.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.8.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.8.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.8.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.9:rc1:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.9.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.9.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.9.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.9.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.10:rc1:*:*:*:*:*:* | ||
cpe:2.3:a:mahara:mahara:1.10.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page